59 matches found
CVE-2026-76718
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
CVE-2026-76718 HPE OneView - Cross-site scripting vulnerability
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
CVE-2026-76718 HPE OneView - Cross-site scripting vulnerability
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
EUVD-2026-88693
A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...
CVE-2026-76718
A security vulnerability exists in HPE OneView (prior to v11.40 ) and HPE Synergy Composer (prior to v11.40 ), categorized as a Cross-Site Scripting (XSS) and URL Redirection issue. The flaw can be exploited remotely to facilitate remote session hijacking or other unauthorized actions. To remedia...
CVE-2026-66420: Origin Validation Error
MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName function within webserver.js when...
CVE-2026-59804: Missing Origin Validation in WebSockets
Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attackers to hijack active bridge sessions by opening a cross-origin WebSocket connection to the local Socket.IO server, whi...
PraisonAI 访问控制错误漏洞
PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.5.139 and praisonaiagents prior to 1.5.140 contained an access control vulnerability. This vulnerability stemmed from the lack of authentication on the browser bridge and...
CVE-2026-25072: Use of Insufficiently Random Values
XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that allows remote attackers to hijack authenticated sessions. Attackers can predict session identifiers using insufficiently random cook...
PT-2026-23783
Name of the Vulnerable Software and Affected Versions XikeStor SKS8310-8X Network Switch firmware versions prior to 1.04.B07 Description The XikeStor SKS8310-8X Network Switch firmware contains a flaw related to session identifiers. A remote attacker can hijack authenticated sessions by predictin...
EUVD-2002-0417
Malware in sbrugna...
EUVD-2012-5096
Malware in sbrugna...
EUVD-2009-2578
Malware in sbrugna...
EUVD-2000-0110
Malware in sbrugna...
EUVD-2013-0948
Malware in sbrugna...
EUVD-2011-3101
Malware in sbrugna...
EUVD-2009-3632
Malware in sbrugna...
EUVD-2014-4708
Malware in sbrugna...